DNS external resolution issue 2

[felihad]

Hello,

We have an internal network which includes also a dns server which owns the zone "prosisainternational.info", internally users can run nslookup for the internal zone "prosisainternational.info" and external zones like "msn", "yahoo" as well. The users can also browse the internet without any issues.

Now, from the any external network nslookup won't work for the internal zone "prosisainternational.info", this domain it's a valid domain name and it's being hosted on ns1.prosisainternational.info which is the dns server, however running nslookup from that server to other domains like "msn" or "yahoo" works.

This is very confusing...

If any one can try running nslookup to "ns1.prosisainternational.info" and you will understand what i tried to explaind before.

Thanks.

 

[Serbtastic]

It works for me:

> server ns1.prosisainternational.info
Default Server: ns1.prosisainternational.info
Address: 64.234.219.30

> ls -d prosisainternational.info
[ns1.prosisainternational.info]
prosisainternational.info. SOA NS1.prosisainternational.info root.prosis
ainternational.info. (20040603 86400 7200 2592000 3600)
prosisainternational.info. NS NS1.prosisainternational.info
prosisainternational.info. NS NS2.prosisainternational.info
prosisainternational.info. A 192.168.10.90
prosisainternational.info. A 64.234.219.32
prosisainternational.info. A 192.168.10.91
prosisainternational.info. A 64.234.219.33
prosisainternational.info. MX 10 ms1.prosisainternational.info
prosisainternational.info. MX 20 ms2.prosisainternational.info
ms1 A 192.168.10.5
ms1 A 64.234.219.25
appsrv01 A 192.168.10.101
appsrv01 A 64.234.219.16
ms2 A 192.168.10.6
ms2 A 64.234.219.26
ipmonitor A 192.168.10.113
ipmonitor A 64.234.219.36
appsrv02 A 192.168.10.102
appsrv02 A 64.234.219.17
prosisa-dev A 192.168.10.60
prosisa-dev A 64.234.219.35
db1 A 192.168.10.200
websrv01 A 192.168.10.90
websrv01 A 64.234.219.32
websrv02 A 192.168.10.91
websrv02 A 64.234.219.33
www A 192.168.10.90
www A 64.234.219.32
www A 192.168.10.91
www A 64.234.219.33
NS1 A 192.168.10.2
NS1 A 64.234.219.30
NS2 A 192.168.10.3
NS2 A 64.234.219.31
prosisainternational.info. SOA NS1.prosisainternational.info root.prosis
ainternational.info. (20040603 86400 7200 2592000 3600)

 

[ChrisAC]

[chris@uranium chris]$ dig @NS1.prosisainternational.info prosisainternational.info any

; <<>> DiG 9.2.1 <<>> @NS1.prosisainternational.info prosisainternational.info any
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13273
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 7, AUTHORITY: 2, ADDITIONAL: 4

;; QUESTION SECTION:
;prosisainternational.info. IN ANY

;; ANSWER SECTION:
prosisainternational.info. 3600 IN A 64.234.219.32
prosisainternational.info. 3600 IN A 64.234.219.33
prosisainternational.info. 3600 IN NS NS1.prosisainternational.info.
prosisainternational.info. 3600 IN NS NS2.prosisainternational.info.
prosisainternational.info. 3600 IN SOA NS1.prosisainternational.info. root.prosisainternational.info. 20040604 86400 7200 2592000 3600
prosisainternational.info. 3600 IN MX 10 ms1.prosisainternational.info.
prosisainternational.info. 3600 IN MX 20 ms2.prosisainternational.info.

;; AUTHORITY SECTION:
prosisainternational.info. 3600 IN NS NS1.prosisainternational.info.
prosisainternational.info. 3600 IN NS NS2.prosisainternational.info.

;; ADDITIONAL SECTION:
NS1.prosisainternational.info. 3600 IN A 64.234.219.30
NS2.prosisainternational.info. 3600 IN A 64.234.219.31
ms1.prosisainternational.info. 3600 IN A 64.234.219.25
ms2.prosisainternational.info. 3600 IN A 64.234.219.26

;; Query time: 124 msec
;; SERVER: 64.234.219.30#53(NS1.prosisainternational.info)
;; WHEN: Sat Jun 5 22:55:09 2004
;; MSG SIZE rcvd: 284


**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************

 

[ChrisAC]

You really shouldn't leave your DNS server open to zone transfers from anywhere ..

[chris@uranium chris]$ dig @NS1.prosisainternational.info prosisainternational.info axfr

; <<>> DiG 9.2.1 <<>> @NS1.prosisainternational.info prosisainternational.info axfr
;; global options: printcmd
prosisainternational.info. 3600 IN SOA NS1.prosisainternational.info. root.prosisainternational.info. 20040604 86400 7200 2592000 3600
prosisainternational.info. 3600 IN NS NS1.prosisainternational.info.
prosisainternational.info. 3600 IN NS NS2.prosisainternational.info.
prosisainternational.info. 3600 IN A 64.234.219.32
prosisainternational.info. 3600 IN A 64.234.219.33
prosisainternational.info. 3600 IN MX 10 ms1.prosisainternational.info.
prosisainternational.info. 3600 IN MX 20 ms2.prosisainternational.info.
ms1.prosisainternational.info. 3600 IN A 64.234.219.25
appsrv01.prosisainternational.info. 3600 IN A 64.234.219.16
ms2.prosisainternational.info. 3600 IN A 64.234.219.26
ipmonitor.prosisainternational.info. 3600 IN A 64.234.219.36
appsrv02.prosisainternational.info. 3600 IN A 64.234.219.17
prosisa-dev.prosisainternational.info. 3600 IN A 64.234.219.35
websrv01.prosisainternational.info. 3600 IN A 64.234.219.32
websrv02.prosisainternational.info. 3600 IN A 64.234.219.33

http://www.prosisainternational.info.

3600 IN A 64.234.219.32

http://www.prosisainternational.info.

3600 IN A 64.234.219.33
NS1.prosisainternational.info. 3600 IN A 64.234.219.30
NS2.prosisainternational.info. 3600 IN A 64.234.219.31
prosisainternational.info. 3600 IN SOA NS1.prosisainternational.info. root.prosisainternational.info. 20040604 86400 7200 2592000 3600
;; Query time: 248 msec
;; SERVER: 64.234.219.30#53(NS1.prosisainternational.info)
;; WHEN: Sat Jun 5 22:56:32 2004
;; XFR size: 21 records

**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************